This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363432303a3a2f34382d3438203d3e20323732383438.roa File: 323830333a636436303a363432303a3a2f34382d3438203d3e20323732383438.roa (raw, json) Hash identifier: +qNvtG2/ZL0flKy9svlJIPNhD0DKQwZXdqqrfXSw1mM= Subject key identifier: 58:2B:B8:11:FA:21:4D:36:95:E3:22:54:D2:9B:57:AE:38:9E:F2:E3 Certificate issuer: /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Certificate serial: 47820FF9C10531F5931E5EAA749D2055391DD126 Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363432303a3a2f34382d3438203d3e20323732383438.roa Signing time: Tue 06 Jan 2026 19:20:06 +0000 ROA not before: Tue 06 Jan 2026 19:15:06 +0000 ROA not after: Tue 05 Jan 2027 19:20:06 +0000 asID: 272848 IP address blocks: 2803:cd60:6420::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Jan 2026 00:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:0f:f9:c1:05:31:f5:93:1e:5e:aa:74:9d:20:55:39:1d:d1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223 Validity Not Before: Jan 6 19:15:06 2026 GMT Not After : Jan 5 19:20:06 2027 GMT Subject: CN=582BB811FA214D3695E32254D29B57AE389EF2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:6f:25:f6:f2:29:fc:a2:c3:25:27:96:44: b8:90:48:8d:e3:58:9b:e6:82:b3:b2:a6:b2:5e:48: c2:21:83:d6:aa:92:4e:93:d7:bf:28:34:cd:91:1a: af:d7:f7:a3:4f:ea:14:c8:76:93:26:fa:06:8f:f9: 6f:0e:6a:fe:51:1a:a1:f0:fa:da:eb:9f:a3:c4:1a: c2:4e:65:21:7a:5c:9e:5e:69:ca:f5:78:75:56:0f: 09:a1:1d:df:9c:83:8b:95:a7:e8:c9:dc:51:95:52: 1c:ee:a9:07:be:ba:dc:6c:f1:20:27:f4:ca:1b:ca: de:8d:92:ba:96:b5:11:32:47:2b:cd:10:59:29:33: d7:1c:65:a2:06:ef:3b:a1:02:f2:53:15:f3:f1:94: 62:2c:18:fd:6b:e5:64:12:55:a5:db:c5:2a:b6:c9: 2b:9e:eb:92:22:ab:a3:e9:20:96:8d:be:01:26:b4: 2a:13:f6:86:f9:b2:5c:f7:db:78:bb:ad:b9:7b:30: c1:7e:3d:6f:13:91:1e:c9:92:a8:d4:2a:cb:6e:56: d0:09:14:7d:56:c6:3a:52:81:8a:d2:f4:87:54:56: 69:32:25:0d:2a:c2:bc:9b:b7:6f:b7:ea:3c:a0:02: f8:ea:be:a3:8e:3f:4a:39:23:eb:66:d1:31:ca:a9: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:B8:11:FA:21:4D:36:95:E3:22:54:D2:9B:57:AE:38:9E:F2:E3 X509v3 Authority Key Identifier: keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a363432303a3a2f34382d3438203d3e20323732383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:cd60:6420::/48 Signature Algorithm: sha256WithRSAEncryption 67:2a:6b:98:95:85:52:84:8c:0f:15:dd:25:4b:ed:da:32:30: 30:6b:a9:16:68:05:33:8a:f9:a4:50:be:62:be:62:fa:d1:98: e7:26:13:46:7b:02:87:f6:47:f8:dc:3e:89:b3:c5:b5:cf:ed: c9:8b:35:d2:f5:b5:28:c9:d9:bc:26:71:7b:db:eb:14:3d:78: b1:e1:a5:db:82:d2:37:4a:2c:b1:6f:57:81:70:5b:87:35:4a: 22:fd:cb:99:3f:38:10:bc:6c:c8:f5:51:75:02:61:ad:67:e1: 96:a3:9d:d8:01:4d:bc:29:ce:80:63:68:7c:b2:a4:29:5e:90: 84:14:b2:3e:d2:d5:9b:2d:27:b8:4f:04:6e:ed:ac:d2:05:9d: 2f:ce:73:77:fb:f3:99:d0:6b:97:21:96:35:75:c9:34:15:69: 71:f9:dd:23:d3:7a:a3:57:f7:87:ec:39:7a:c1:64:b6:96:c5: a0:e0:a6:a2:d7:86:3c:1a:67:0a:10:7e:f6:53:fd:af:84:29: d7:54:48:89:35:17:80:95:b7:87:e3:e5:63:c0:5a:4a:98:cc: d1:23:f1:c9:ef:a0:76:4d:3a:54:83:1a:d7:9f:96:b4:6b:83: 90:11:db:6d:a3:05:19:21:8b:3d:56:62:bb:10:5b:f6:65:fa: 84:37:71:7c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUR4IP+cEFMfWTHl6qdJ0gVTkd0SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFERDkxMzhGRTBGNjgwOEIwOTk4NTI2NzcxMTI5QkEz Q0RGNzIyMzAeFw0yNjAxMDYxOTE1MDZaFw0yNzAxMDUxOTIwMDZaMDMxMTAvBgNV BAMTKDU4MkJCODExRkEyMTREMzY5NUUzMjI1NEQyOUI1N0FFMzg5RUYyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhW8l9vIp/KLDJSeWRLiQSI3j WJvmgrOyprJeSMIhg9aqkk6T178oNM2RGq/X96NP6hTIdpMm+gaP+W8Oav5RGqHw +trrn6PEGsJOZSF6XJ5eacr1eHVWDwmhHd+cg4uVp+jJ3FGVUhzuqQe+utxs8SAn 9Mobyt6NkrqWtREyRyvNEFkpM9ccZaIG7zuhAvJTFfPxlGIsGP1r5WQSVaXbxSq2 ySue65Iiq6PpIJaNvgEmtCoT9ob5slz323i7rbl7MMF+PW8TkR7JkqjUKstuVtAJ FH1WxjpSgYrS9IdUVmkyJQ0qwrybt2+36jygAvjqvqOOP0o5I+tm0THKqbWdAgMB AAGjggLVMIIC0TAdBgNVHQ4EFgQUWCu4EfohTTaV4yJU0ptXrjie8uMwHwYDVR0j BBgwFoAUCt2ROP4PaAiwmYUmdxEpujzfciMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82QjU1MDZEODExRTVEQUJCMEQxRDE1NDY3RUNBODIwQTYz RTQ5RTU3RTIxNThCQUY2OEM1OTUwQzlGODI4QkI2LzAvMEFERDkxMzhGRTBGNjgw OEIwOTk4NTI2NzcxMTI5QkEzQ0RGNzIyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUREOTEzOEZFMEY2ODA4QjA5 OTg1MjY3NzExMjlCQTNDREY3MjIzLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNkI1NTA2RDgxMUU1REFCQjBEMUQxNTQ2N0VDQTgyMEE2M0U0OUU1N0Uy MTU4QkFGNjhDNTk1MEM5RjgyOEJCNi8wLzMyMzgzMDMzM2E2MzY0MzYzMDNhMzYz NDMyMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAoA81gZCAwDQYJKoZIhvcNAQELBQADggEBAGcqa5iVhVKEjA8V3SVL7doy MDBrqRZoBTOK+aRQvmK+YvrRmOcmE0Z7Aof2R/jcPomzxbXP7cmLNdL1tSjJ2bwm cXvb6xQ9eLHhpduC0jdKLLFvV4FwW4c1SiL9y5k/OBC8bMj1UXUCYa1n4ZajndgB TbwpzoBjaHyypClekIQUsj7S1ZstJ7hPBG7trNIFnS/Oc3f785nQa5chljV1yTQV aXH53SPTeqNX94fsOXrBZLaWxaDgpqLXhjwaZwoQfvZT/a+EKddUSIk1F4CVt4fj 5WPAWkqYzNEj8cnvoHZNOlSDGteflrRrg5AR222jBRkhiz1WYrsQW/Zl+oQ3cXw= -----END CERTIFICATE-----Generated at Tue Jan 27 08:38:10 2026 by rpki-client